summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2007-04-10releasing version 1:4.3p2-10Colin Watson
2007-04-10* Increase MAX_SESSIONS to 64.Colin Watson
2007-04-10* Multiply openssh-client-udeb's Installer-Menu-Item by 100.Colin Watson
2007-03-05releasing version 1:4.3p2-9Colin Watson
2007-03-05* Fix uncommenting of GSSAPI options by ssh-krb5 (closes: #407766).Colin Watson
2007-03-05* Fix GSSAPIKeyExchange configuration file handling logic in ssh-krb5Colin Watson
(closes: #404863).
2007-02-25msgcatColin Watson
2007-02-25* debconf template translations:Colin Watson
- Add Norwegian Bokmål (thanks, Bjørn Steensrud; closes: #412330).
2006-12-23releasing version 1:4.3p2-8Colin Watson
2006-12-23* It turns out that the people who told me that removing a conffile in theColin Watson
preinst was sufficient to have dpkg replace it without prompting when moving a conffile between packages were very much mistaken. As far as I can tell, the only way to do this reliably is to write out the desired new text of the conffile in the preinst. This is gross, and requires shipping the text of all conffiles in the preinst too, but there's nothing for it. Fortunately this nonsense is only required for smooth upgrades from sarge.
2006-12-23fix disable_config_option to actually workColin Watson
2006-12-23urgency=mediumColin Watson
2006-12-23* Make GSSAPICleanupCreds a compatibility alias forColin Watson
GSSAPICleanupCredentials. Mark GSSUseSessionCCache and GSSAPIUseSessionCredCache as known-but-unsupported options, and migrate away from them on upgrade.
2006-12-17debconf-updatepoColin Watson
2006-12-17* debconf template translations:Colin Watson
- Add Romanian (thanks, Stan Ioan-Eugen; closes: #403528).
2006-12-13* Drop versioning on ssh/ssh-krb5 Replaces, as otherwise it isn'tColin Watson
sufficient to replace conffiles (closes: #402804).
2006-12-11* Give the ssh-askpass-gnome window a default icon; remove unnecessaryColin Watson
icon extension from .desktop file (closes: https://launchpad.net/bugs/27152).
2006-12-06releasing version 1:4.3p2-7Colin Watson
2006-12-06ssh-krb5 needs a copyright fileColin Watson
2006-12-06don't symlink /usr/share/doc/ssh-krb5; we have a separate NEWS file to put thereColin Watson
2006-12-06* When installing openssh-client or openssh-server from scratch, removeColin Watson
any unchanged conffiles from the pre-split ssh package to work around a bug in sarge's dpkg (thanks, Justin Pryzby and others; closes: #335276).
2006-12-06fix sed mistakeColin Watson
2006-12-06* Fix quoting error in configure.ac and regenerate configure (thanks, BenColin Watson
Pfaff; closes: #391248).
2006-12-06ignore debian/ssh-krb5Colin Watson
2006-12-06urgency=mediumColin Watson
2006-12-06* Remove version control tags from /etc/ssh/moduli and /etc/ssh/ssh_configColin Watson
to avoid unnecessary conffile resolution steps for administrators (thanks, Jari Aalto; closes: #335259).
2006-12-06close #390986Colin Watson
2006-12-06* Add ssh -K option, the converse of -k, to enable GSSAPI credentialColin Watson
delegation (closes: #401483).
2006-12-06* Create transitional ssh-krb5 package which enables GSSAPI configurationColin Watson
in sshd_config. * Default client to attempting GSSAPI authentication. * Remove obsolete GSSAPINoMICAuthentication from sshd_config if it's found.
2006-11-20* Ignore errors from usermod when changing sshd'\''s shell, since it willColin Watson
fail if the sshd user is not local (closes: #398436).
2006-11-15releasing version 1:4.3p2-6Colin Watson
2006-11-15* Backport from 4.5p1:Colin Watson
- Fix a bug in the sshd privilege separation monitor that weakened its verification of successful authentication. This bug is not known to be exploitable in the absence of additional vulnerabilities.
2006-10-29* debconf template translations:Colin Watson
- Update German (thanks, Helge Kreutzmann; closes: #395947).
2006-10-27* openssh-server Suggests: molly-guard (closes: #395473).Colin Watson
2006-10-27ack NMU, and a whitespace tweakColin Watson
2006-10-27Incorporate Manoj's NMU:Colin Watson
* NMU to update SELinux patch, bringing it in line with current selinux releases. The patch for this NMU is simply the Bug#394795 patch, and no other changes. (closes: #394795)
2006-10-05releasing version 1:4.3p2-5Colin Watson
2006-10-04* Remove ssh/insecure_telnetd check altogether (closes: #391081).Colin Watson
2006-10-02* debconf template translations:Colin Watson
- Update Danish (thanks, Claus Hindsgaul; closes: #390612).
2006-09-29releasing version 1:4.3p2-4Colin Watson
2006-09-29 - CVE-2006-5051: Fix an unsafe signal hander reported by Mark Dowd. TheColin Watson
signal handler was vulnerable to a race condition that could be exploited to perform a pre-authentication denial of service. On portable OpenSSH, this vulnerability could theoretically lead to pre-authentication remote code execution if GSSAPI authentication is enabled, but the likelihood of successful exploitation appears remote.
2006-09-29* Backport from 4.4p1 (since I don't have an updated version of the GSSAPIColin Watson
patch yet): - CVE-2006-4924: Fix a pre-authentication denial of service found by Tavis Ormandy, that would cause sshd(8) to spin until the login grace time expired (closes: #389995).
2006-09-29* Make ssh/insecure_telnetd Type: error (closes: #388946).Colin Watson
2006-09-29* Remove no-longer-used ssh/insecure_rshd debconf template.Colin Watson
2006-09-29* Read /etc/default/locale as well as /etc/environment (thanks, RaphaëlColin Watson
Hertzog; closes: #369395).
2006-08-20msgcatColin Watson
2006-08-20 - Update Spanish (thanks, Javier Fernández-Sanguino Peña;Colin Watson
closes: #382966).
2006-08-08recode to UTF-8Colin Watson
2006-08-08* debconf template translations:Colin Watson
- Update Portuguese (thanks, Rui Branco; closes: #381942).
2006-07-27releasing version 1:4.3p2-3Colin Watson
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-14 17:50:06 +0000